STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The Mainframe Product must reveal full-text detail error messages only to system programmers and/or security administrators.

DISA Rule

SV-205525r961170_rule

Vulnerability Number

V-205525

Group Title

SRG-APP-000267

Rule Version

SRG-APP-000267-MFP-000335

Severity

CAT II

CCI(s)

• CCI-001314 - Reveal error messages only to organization-defined personnel or roles.

Weight

10

Fix Recommendation

Configure the Mainframe Product to restrict full text detailed error message to system programmers and/or security administrators only.

Check Contents

Examine product documentation and code.

If full text detailed error message are not restricted to system programmers and/or security administrators, this is a finding.

Vulnerability Number

V-205525

Documentable

False

Rule Version

SRG-APP-000267-MFP-000335

Severity Override Guidance

Examine product documentation and code.

If full text detailed error message are not restricted to system programmers and/or security administrators, this is a finding.

Check Content Reference

M

Target Key

2906